no kerberos ticket issued to AFP client on Mac OSX

[sebjenkins]

Hi,

We have bound several Macs to the Microsoft AD domain. One of the reasons for doing this was to achieve a single sign-on environment. ie no need to reautenticate when connecting to one of the file servers etc.
The problem we have is that when we attempt to connect to the Win2003 fileserver using AFP we are still being prompted to reauthenticate wheras if we use SMB instead it connects staright away. We have noticed that the SMB connection works straight off as the Kerberos Domain Controller (KDC) issues the OSX user with a kerberos ticket which is viewable in the Kerberos.app on the Mac.
Does anybody have any ideas that may help with this ?
Thanks in advance

 

[sebjenkins]

Ok, after much research it seems it is only possible to achieve single sign on with AFP if you use a 3rd party product installed on your Windows server such MacIP Server or Group Logics ExtremeZip.